Attacks and malware
What is Spoofing?
Faking an identity such as an email sender, caller ID, IP address or website so a message or connection appears to come from someone trusted.
Spoofing is forging an identity marker so that something appears to come from a trusted source: the From address of an email, a phone number, a website's look and address, or the source IP of network traffic.
Email spoofing is the most common in CTI work. SPF, DKIM and DMARC let receiving servers check whether a message really came from the domain it claims, but only if the domain owner publishes those records and enforces them.